CVE-2026-39243

decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries type === 'link', the x.linkname field from the archive is passed directly to fs.link without validation index.js line 113. An...

PT-2024-1420 · Asus · Asus Armoury Crate

Name of the Vulnerable Software and Affected Versions: ASUS Armoury Crate affected versions not specified Description: The issue is related to arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission. This is due to...

WireGuard VPN Block IP Traffic

The vulnerability of the VPN service WireGuard is related to errors in handling links. Exploiting this vulnerability allows a remote attacker to block IP traffic on selected IP addresses...

Trend Micro Antivirus libTmUtil Privilege Escalation

The vulnerability of the libTmUtil dylib component of the Trend Micro Antivirus security tool is related to errors in link handling. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

Adobe Creative Cloud Desktop Application Graphic Editor File Write

The vulnerability of the Adobe Creative Cloud Desktop Application is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor to write arbitrary files to the device’s file system remotely...

chkstat Privilege Escalation

The vulnerability of the chkstat tool for checking and setting access rights for files in SUSE Linux Enterprise Server stems from an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to increase their privileges...